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Abstract 

We give explicit constructions of sets 5* with the property that for each integer k, there are 
at most g solutions to fc = Si + S2, £ 5"; such sets are called Sidon sets if g = 2 and generalized 
Sidon sets if g > 3. We extend to generalized Sidon sets the Sidon-set constructions of Singer, 
Bose, and Ruzsa. We also further optimize Kolountzakis' idea of interleaving several copies of a 
Sidon set, extending the improvements of Cilleruelo & Ruzsa & Trujillo, Jia, and Habsieger & 
Plagne. The resulting constructions yield the largest known generalized Sidon sets in virtually 
all cases. 

Keywords: Sidon Set 

1 Sidon's Problem 

In connection with his study of Fourier series, Simon Sidon |18| was led to ask how dense a set of 
integers can be without containing any solutions to 

Sl + S2 = S3 + S4 

aside from the trivial solutions {si,S2} — {^3,34}. This, and certain generalizations, have come to 
be known as Sidon's Problem. 

Given a set 5 C Z, we define the function 5 * S* by 

S * S{k) :— |{(si, S2) : Si & S, si + S2 — k}\, 

which counts the number of ways to write fc as a sum of two elements of S. We also set 

II -S* II 00 := US' * 511 00 = max |{(si, S2) : Si € 5, si + S2 = k}\. 

Note that if the set S is translated by c, then the function 5 * S* is translated by 2c, and 115*1100 is 
unaffected. Similarly, if the set S is dilated by a factor of c, then 115**1100 is unaffected. 

If II 5* II 00 < 2, then 5 is called a Sidon set. Table contains the optimally dense Sidon sets 
with 10 or fewer elements. Erdos & Turan [5] showed that if 5 C [n] := {1,2, . . . , n} is a Sidon 
set, then |5| < n^^^ + O (n^/**), and Singer gave a construction that yields a Sidon set in [n] 
with |5| > ri"'^/^ — n^/^^, for sufficiently large n. Thus, the maximum density of a finite Sidon set is 
asymptotically known. The maximum growth rate of 1 5 H [n] | for an infinite Sidon set 5 remains 
enigmatic. We direct the reader to jj^l for a survey of Sidon's Problem. 
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k min{afe — ai} Witness 

3 3 {0,1,3} 

4 6 {0,1,4,6} 

5 11 {0,1,4,9,11} 

{0,2,7,8,11} 

6 17 {0,1,4,10,12,17} 

{0,1,4,10,15,17} 
{0,1,8,11,13,17} 
{0,1,8,12,14,17} 

7 25 {0,1,4,10,18,23,25} 

{0,1,7,11,20,23,25} 
{0,1,11,16,19,23,25} 
{0,2,3,10,16,21,25} 
{0,2,7,13,21,22,25} 

8 34 {0,1,4,9,15,22,32,34} 

9 44 {0,1,5,12,25,27,35,41,44} 

10 55 {0,1,6,10,23,26,34,41,53,55} 

Table 1: shortest Sidon sets, up to translation and reflection 



The object of this paper is to give constructions of large finite sets S satisfying the constraints 
S C [n] and ||5*||oo < 9, that is, "large" in terms of n and g. We extend the Sidon set construction of 
Singer, as well as those of Bose ^ and Ruzsa ITBI , to allow || S"* || oo < 9 for arbitrary g. The essence of 
our extension is that although the union of 2 distinct Sidon sets typically has large US'*!!,,©, the union 
of two of Singer's sets will have || 5**1100 < 8. We also further optimize the idea of Kolountzakis [T^ 
(refined in and in of controlling ||S'*||oo by interleaving several copies of the same Sidon set. 

We warn the reader that the notation ||5*||oo is not in wide use. Most authors write "S is a B2[g] 
set", sometimes meaning that || 5**1100 ^ "^g and sometimes that ||5'*||oo < 2(7+ 1. Our notation is 
motivated by the common practice of using the same symbol for a set and for its indicator function. 
With this convention, 

S*S{k) = ^ 5(a;)5(A: - x) 

is the Fourier convolution of the function 5 with itself, and counts representations as a sum of two 
elements of 5. We use the same notation when discussing subsets of Z„, the integers modulo n, and 
no ambiguity arises. 
Define 



Rig,n) :=max{|^|: 5C [n], ||5*||oo <5}. (1) 

In words, R{g, n) is the largest possible size of a subset of [n] whose pairwise sums repeat at most 
g times. We provide explicit lower bounds on R{g,n) which are new for large values of g. Figure Q 
shows the current upper and lower bounds on 

<j{g) '■= liminf ■ 



V%72J 



We comment that it may be possible to replace the lim inf in the definition of a with a simple lim, 
but that this has not been proven and is not important for the purposes of this paper. The lower 
bounds on a{g) all presented in this paper; some are originally found in {g = 2,3), ^I] (17 = 4), 
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Figure 1: Upper and lower bounds on a{g). 



and [5] ((7 = 8, 10) but for other g are new. Other than the precise asymptotics for the g — 2 and 
g = 3 cases (which were found in 1944 [S] and 1996 17 ), the upper bounds indicated in Figure ^ 
are due to Green |5] when g < 20 is even; for aU other values of g, the upper bounds are new and 
are the subject of a work in progress by the authors jl4| . 

Essential to proving these bounds on a{g) is the consideration of 

Cig,n) :=max{|5|: 5CZ„, ||5*||oo < .g} • (2) 

The function C{g, n) gives the largest possible size of a subset of the integers modulo n whose 
pairwise sums (mod n) repeat at most g times. There is a sizable literature on R{g,n), but little 
work has been done on C{g, n). There is a growing consensus among researchers on Sidon's Problem 
that substantial further progress on the growth of R{g, n) will require a better understanding of 
C{g,n). Theorems n a-nd 121 below give the state-of-the-art upper and lower bounds. 

Tables|5]and|31contain exact values for R{g, n) and C{g, n), respectively, for small values oi g and 
n. These tables have been established by direct (essentially exhaustive) computation. Specifically, 
Table 121 records, for given values of g and k, the smallest possible value of maxS* given that S C Z+, 
\S\ — k and ||S'*||oo < g; in other words, the entry corresponding to k and g is minjrt: R{g, n) > k}. 
For example, the fact that the {k,g) = (8,2) entry equals 35 records the fact that there exists an 
8-element Sidon set of integers from [35] but no 8-element Sidon set of integers from [34]. 

To show that i?(2, 35) > 8, for instance, it is only necessary to observe that 

5= {1,3,13,20,26,31,34,35} 

has 8 elements and || 5**1100 — 2. To show that i?(2,35) < 8, however, seems to require an extensive 
search. 
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Table 2: min{n: R{g,n) > k} 
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Table 3: min{n: C{g,n) > k} 
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In the next section, we state our upper bounds on C{g, n), lower bounds on R{g, n) and C{g, n), 
and constructions that demonstrate our lower bounds. In Section |31 we prove the bounds claimed 
in Section [3 Since the value of this work is primarily as a synthesis and extension of ideas from a 
variety of other works, we have endeavored to make this paper self-contained. We conclude in the 
final section by listing some questions that we would like, but have been unable, to answer. 



2 Theorems and Constructions 



2.1 Theorems 
Theorem 1. (i) { 



C(2j 
2 



< 



[■^J , and in particular C(2, n) < y/n + 1; 



(ii) C(3,n) < y/n + 9/2 + 3; 
(lit) C(4,7i) < V3^+ 7/6; 
(iv) C{g,n) < ^/gn for even g; 



(v) C{g,n) < - ^^/gn+l, for odd g. 



Theorem 2. Let q he a prime power, and let k, g, f, x,y be positive integers with k < q. 
(i) If p is a prime, then C{2k^,p^ — p) ^ k{p — 1); 
(ii) C(2fc2,g2 _ 1) > kq; 

(lit) C(2fc2, q^ + q + l)>kq + 1; 

(iv) //gcd(x,y) = 1, then C{gf,xy) > C{g,x)C{f,y); 

(v) R{gf, xy) > R{gf, xy + 1 ~ \^] ) > R{g, x)C{f, y); 

(vi) R{g, 3.g - [g/3\ + 1) > g + 2 [g/3\ + [g/6\ . 
Theorem 3. 

cr(4) > y/S/7 > 1.069, 



cr(6) > v/16/15 > 1.032, 
cr(8) > ^8/7 > 1.069, 
cr(lO) > ^49/45 > 1.043, 
cr(12) > ye/S > 1.095, 

Theorem 4. For g > 1, 

g + 2 [g/3\ + [g/6\ 



cr(14) > ^121/105 > 1.073, 
ct(16) > v/289/240 > 1.097, 

cr(18) > ^32727 > 1.088, 

ct(20) > ^40/33 > 1.100, 

a(22) > ^324/275 > 1.085, 



ai2g + I) > ai2g) > 



V3g^-glg/3\ +g 



In particular. 



liminf cr(.g) > 



11 



We note that Martin & O'Bryant have shown ^1] that limsup^^o^ cr(g) < 1.8391, whereas 
11/V96 > 1.1226. These lower bounds on a, together with the strongest known upper bounds, are 
plotted for 2 < g < 42 in Figure [D 
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2.2 Constructions 

Theorem |21 rests on the constructions given in the following four subsubsections. We denote the 



2.2.1 Ruzsa's Construction 

Let be a generator of the multiplicative group modulo the prime p. For 1 < i < p, let at^i be the 
congruence class modulo — p defined by 



Define the set 

Ruzsa(p, 9, k) :— {at.k : 1 < ^ < p} C Zp2_p. 
Ruzsa pEI showed that Ruzsa(p, 6, 1) is a Sidon set. We show that if K. is any subset of [p— 1], then 



is a subset of Zp2_p with cardinality |/C|(p — 1) and 

||Ruzsa(p,(?,/C)*||oo < 2|/C|2. 
For example, Ruzsa(ll, 2, {1, 2}) is 

{7, 39, 58, 63, 65, 86, 92, 100, 101, 104} U {28, 47, 52, 54, 75, 81, 89, 90, 93, 106}, 
and one may directly verify that ||Ruzsa(ll, 2, {1, 2})*||oo — 8. 

2.2.2 Bose's Construction 

Let q be any prime power, 9 a generator of Fg2, fc G F^, and define the set 

Bose((j, 9, k) := {a G [q^ - 1] : 6*" - fc6l e FJ. 
Bose |2j showed that for fc 7^ 0, Bose((7, 9, k) is Sidon set. We show that if K. is any subset of Fg \ {0}, 



finite field with q elements by Fg, and its multiplicative group by F^. 



at^i = t (mod p — 1) and at,i = i9* (mod p). 




then 



Bose(q,6',K;) := |J Bose((j, 6*, fc) 



is a subset of Zq2_]^, has \K,\q elements, and 
||Bose(g,0,/C)*||o, <2|/C|2. 



For example, Bose(ll, x mod (11, + ix + 6), {1, 2}) is 



{1, 30, 38, 55, 56, 65, 69, 71, 76, 99, 118} U {18, 26, 43, 44, 53, 57, 59, 64, 87, 106, 109}. 
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2.2.3 Singer's Construction 

Sidon sets arose incidentally in Singer's work jj^ on finite projective geometry. While Singer's 
construction gives a slightly thicker Sidon set than Bose's (which is slightly thicker than Ruzsa's), 
the construction is more complicated — even after the simplification of 

Let q be any prime power, and let be a generator of the multiplicative group of FgS . For each 
fci , fc2 G ¥q define the set 

T((/ci, fe)) := {0} U {a e [q^ - 1] : ^ - fcs^' - hO G FJ. 

Then define 

Singer((7, 6*, (fci,/c2)) 

to be the congruence classes modulo q'^ + q + 1 that intersect T((fci,fc2)). Singer proved that for 
^2 = 0,ki 7^ 0, Singer((7, 9, (fci, /c2)) is a Sidon set. We show that if /C C Fg x Fg does not contain 
two pairs with one an F^-multiple of the other, then 

Singer((?, 6',/C) := |J Singer(g, 6*, fc) 

fce/c 

is a subset of Ijq2_^g_f_i with \JC\q + 1 elements and 
||Singer(g,^,/C)*||oo <2|/C|^ 
For example, Singer(ll, x mod (11, + + 6x + 4), {(1, 1), (1, 2)}) is 

{0, 9, 57, 59, 63, 81, 86, 97, 100, 112, 125, 132} U {3, 15, 28, 35, 36, 45, 93, 95, 99, 117, 122}. 

2.2.4 The Cilleruelo & Ruzsa & Trujillo Construction 

Kolountzakis observed that if 5 is a Sidon set, and 5+1 := {s+1: s e S}, then ||(S'U(5+l))*||oo < 4. 
This idea of interleaving several copies of the same Sidon set was extended incorrectly by Jia (but 
fixed by Lindstrom), and then correctly by Cilleruelo & Ruzsa & Trujillo, Habsieger & Plagne, and 
Cilleruelo (to h>2). 

Let 5 C and M C Zy have ||5*||oo < 9 and ||A/*||oo < /• Let S' C [x] and M' C [y] be 
corresponding sets of integers, i.e., S = {s mod x: s £ S'}. Now, let 

M' + yS' := {m + ys : m G M' , s e S'} C Z. 

The set 

M + yS := {t mod xy.te M' + yS'} C 
satisfies \\{M + yS')*||oo < gf- 



3 Proofs 

If 5* is a set of integers (or congruence classes), we use S{x) to denote the corresponding indicator 
function. Also, we use the standard notations for convolution and correlation of two real-valued 
functions: 

5 * r(x) - ^ 5(2/)r(a; - y) and 5 o T(x) = ^ 5(y)T(x + y). 

V V 

For sets S*, T of integers, S * T{x) is the number of ways to write a; as a sum s + t with s £ S and 
t G T. Likewise, S o T{x), is the number of ways to write x as a difference t — s. 
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3.1 Theorem HI 

Part (i) is just the combination of the pigeonhole principle and the fact (which we prove below) 
that if \\S * 51100 < 2, then for fc 7^ 0, S* o S{k) < 1. Part (ii) follows from the observation that if 
US'* 511 00 < 3, then SoS{k) < 2 for fc 7^ 0, and in fact SoS{k) < 1 for almost all k. Part (iii) follows 
an idea of Cilleruelo: if |j5 * 5||oo < 4, then 5 o 5 is small on average. For g > 4, the theorem is a 
straightforward consequence of the pigeonhole principle. We consider part (iii) to be the interesting 
contribution. 

Proof of (i). We show that ('^^2'"'') ^ K2J, whence C(2,n) < ^+1. Let S C [n] have ||5*||oo < 2. 
If {si, S2}, {s3, S4} are distinct pairs of distinct elements of S, and 

Sl — S2 = S3 — S4 (mod n), (3) 

then S4 + Sl = Sl + S4 = S3 + S2 = S3 + S2, contradicting the supposition that ||5*||oo < 2. Therefore, 
the map {si, S2} i— > {±(si — S2)} is 1-1 on pairs of distinct elements of S, and the image is contained 
in {{±1}, {±2}, . . . , {± ln/2\ }}. Thus, ) < [n/2\ . 

This bound is actually achieved for n = + p + 1 when p is prime (see Theorem |2Iiii)). 

Proof of (ii). Now suppose that ||5*||oo — 3, and consider the pairs of distinct elements of S. 
Any solution to (0) must have {si, S2} n {S3, 54} ^ since ||5*||oo < 4, and each of the |5| possible 
intersections can occur only once. Therefore, after deleting one pair for each element of S, we get a set 
of (If I) - |5| pairs which is mapped 1-1 by {si, S2} ^ {±(si - S2)} into {{±1}, {±2}, . . . , {± ln/2\ }}. 
This proves Theorem ^ for 5 = 3. 

Proof of (iii). Now suppose that ||5*||oo = 4, where S C Z„. The obvious map from 

^ ■= { ((Sl, 52), (S3, S4)) : Sl - S2 = S3 - S4, Sl ^ {S2, Sglj 

to 

y := I ((si, S4), (s3, S2)^ : Sl -I- S4 = S3 -f S2, {si, S4} ^ {s2, S3}| 
is easily seen to be 1-1 (but not necessarily onto): \X\ < \Y\. We have 

\X\ = ^ (5 o 5(fc)2 -So 5(fc)) > ( XI ° '^('^)) ~ ^° 



k^O ^ k^O ' fe#0 



<l*l'-™"-|5P + |S| 



n- 1 



\s?-\s\ 



\Y\ = |(5*5)-i(3)| 4-1- |(5*5)-i(4)| 8 <4|5| -t-S ' ' ^ ' ' = 2\Sf + 2\S\ 



Comparing the lower bound on \X\ with the upper bound on |y| yields |5| < v 3n -I- 7/6. 

Proof of (iv) and (v). There are |5p pairs of elements from S C Z„, and there are just n possible 
values for the sum of two elements. If ||5*||oo < 9 then each possible value is realized at most g 
times. Thus |5p < gn. The only way a sum can occur an odd number of times is if it is twice an 
element of 5, so for odd 5, \S\^ < {g - l)n + \S\. 
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3.2 Theorem m 

The first three parts of Theorem |21 are all proved in a similar manner, which we outline here. For 
disjoint sets ^i, . . . Sk, with S — USi, we have 

fe 

S*S^{Si + --- + Si,)*{Si + --- + Sk) = J2 s,*s, 

and since Si * Sj is nonnegative, 
fe 

||5*5|U< \\S^* SjWoo < k"" ^maxJS,* S,\\oo- 

To prove part (i), we need to show that the sets Ruzsa(p, 6', i) {I < i < p) are disjoint (hence 
Ruzsa(p, 0, /C) has cardinality |/C|(p— 1)), and that 

||Ruzsa(p, 9, i) * Ruzsa(p, 6', j)||oo < 2. 
Specifically, we use unique factorization in Fp[a;] to show that there are not 3 distinct pairs 

(ftr„,i, Q-u^.j) G Ruzsa(p, x Ruzsa(p, 
with the same sum. 

The proofs of parts (ii) and (iii) follow the same outline, but use unique factorization in ¥q[x] 
and Fg2 [x] , respectively. 

Proof of (i). For the entirety of the proof, we work with fixed p and 9. It is therefore convenient to 
introduce the notation Rk = Ruzsa(p, 9, k). We need to show that Ri n i?^ = for 1 < i < j < _p, 
and that * i?j||oo < 2 (including the possibility i — j). 

Suppose that Om^.i — a„i^,j G Rid Rj, with mi, m2 € [l,p)- We have mi = ami,i — o,m2,j = ™2 
(mod p — 1), so mi — ni2. Reducing the equation ami,i = j" niodulo p, we find iO"^^ = j6"^^ = 
jO™^ (mod p), so i = j. Thus for i 7^ j, the sets Ri, Rj are disjoint. 

Now suppose, by way of contradiction, that there are three pairs {cLr^^i, av,r,,j) G -Ri x Rj satisfying 
«rm,i + o,v„^,j = k (mod p^ — p)- Each pair gives rise to a factorization modulo p of 

— kx + ij9^ = [x ~ (irm.i){x — 0'v,„,j) (mod p). 

Factorization modulo p is unique, so it must be that two of the three pairs are congruent modulo p, 
say 

ari.i = ar2,i (modp). (4) 

In this case, i9^^ = Or-^^i = a^a.i = i^'^ (mod p). Since 9 has multiplicative order p — 1, this tells us 
that ri = r2 (mod p — 1). Since ar„^.i = (mod p — 1) by definition, we have 

ari.i = ar2,i (modp-1). (5) 

Equations 10} and Q, together with 

ari,i + a-vxj = k = ar2,i + 0^2 j (mod — p) 
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imply that the first two pairs are identical, and so there are not three such pairs. Thus, for each 

A: G Z„, we have shown that Ri * Rj{k) < 2. 

Proof of (a). For k G F,, let Bk = Bose(g, 9, k). We need to show that \Bi\ = q, that Bi n Bj = 9 
for distinct i,j € Fg \ {0}, and that * Sj||oo < 2 (including the possibility that i = j). 

Since {9, 1} is a basis for ¥^2 over F^, we can for each s' E [q^ — 1] write 9^ as a linear combination 
of 9 and 1. We define s (unprimed) to be the coefiicient of 1, i.e., 

9'' =i9 + s 

for some i. In this proof, primed variables are integers between 1 and — 1, and unprimed variables 
are elements of ¥q. Note also that a' = b' implies a = b, whereas a = b does not imply a' = b' . 

Since 9 generates the multiplicative group, for z 7^ each s G has a corresponding s' , so that 
\Bi \ = q. Moreover, we know that i9 + si = j9 + S2 implies that i = j and si = 52- In particular, if 
i^j, then B.nBj = 0. Thus |Bose(g, 6*, /C)| = \IC\q. 

We now fix i and j in Fp \ {0} (not necessarily distinct), and show that B^ * Bj{k) < 2 for 
k G Zg2_i. Define ci, C2 G Fp by {ij)~^6'' —6'^ = ciO + C2, and consider pairs (r', v') G BiX Bj with 
r' +v' = k' (mod - 1). We have 

c^e + C2 = (u)^'^''' - = (u)-ir'+^' -e^ = (y)-ir'r' - = 

(ij)"^(t6i + r)(j6i + w) -61^ = {i~'^r+j~'^v)0 + r'^rj~'^v. 

This means that (a, 6) = {i~^r, j~^v) is a solution to — cix + C2 = {x — a){x — b). By unique 
factorization over finite fields, there are at most two such pairs. Thus, Bi * Bj{k) < 2 and so 

\\B,*Bj\\^<2. 

Proof of (in). We first note that and 9^ (for any integers a, 6) are linearly dependent over F^ if 
and only if their ratio is in F,. Since F^ is a subgroup of F^3, we see that F^ — S^^Q^ii"^ +1+'^) ■. x G Z}. 

Thus, we have the following linear dependence criterion: 0" and 9^ are linearly dependent if and 
only if a = 6 (mod + q + 1). 

Since {9"^, 9, 1} is a basis for FgS over F,, we can for each s' G [q^ — 1] write 0* as a linear 
combination of 9 and 1. We define s (unprimed) to be the coefiicient of 1, i.e., 

r' = ^26*2 + kx9 + s 

for some fci,fc2. In this proof, primed variables are integers between 1 and q"^ — 1, and unprimed 
variables are elements of F^. Note, as above, that a' = b' implies a = b, whereas a = b does not 
imply a' = b'. We also define s to be the congruence class of the integer s' modulo q"^ + q + 1. 
For k = {ki,k2) G F^ define 

T{k) := {s' G [q^ -1]:9'' =s + kiO + k2e'^, s G FJ 

which also reiterates the connection between primed variables (such as s' G [q^ — 1]) and unprimed 
variables (such as s G F,). Define S{k) to be the set of congruence classes modulo q"^ + q + 1 
that intersect T{k); as noted above, we denote the congruence class s' mod q"^ + q + 1 as s. Let 
/C = {^1,^2, . . . } C Fg X be a set that does not contain two pairs with one being a multiple of 
the other. Let := {0} U S{ki), and for i > 1 let Si := S{ki). 
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We need to show that |S'i | = (7 + 1, for i > 1 that \Si\ = q, and for distinct i and j, the sets Si 
and Sj are disjoint. This will imply that 

\K\ 

Singer(g, 6*, /C) = |J 5*4 

i=l 

has cardinaUty \IC\q + 1. All of these are immediate consequences of the fact that each element of 
¥q3 has a unique representation as an Fg-linear combination of 9, and 1. 

We will show that for any i,j (not necessarily distinct) there are not three pairs (f 

m : '^m ) ^ Si X Sj 

with the same sum modulo q"^ + q + 1. 

Suppose that ki = {ki,k2) and kj = {l\,l-2). Set K(r,z) := r + k\z + k-2.z'^ and L{v,z) = 
v + iiz + e2Z^. Since 

n + = f2 + = f'a + ^'s 

there are constants 02,03 e Fg such that 0'''^+< = 026'''^+'''^ = C36»''3+''3, and since 6'''+''' = Q''' Q"' = 
K{r,6)L{v,6), the polynomials 

f2{z) := C2K{r2,z)L{v2, z) - K{ri,z)L{vi, z) 
h{z) ■■= C3K{r3,z)L{vs, z) - K{ri,z)L{vi, z) 

both have ^ as a root (we are assuming for the moment that none of Vm,rm are 0). 

If C2 = 1, then f2{z) is a quadratic with the cubic ^ as a root: consequently f2{z) = identically. 
This gives three equations in the unknowns ri, vi, r2, f2, ^i, ^2, f-i, f-2- These equations with 
the assumption that (^1,^2) is not a multiple of (£1,^2)1 imply that ri = r2 and Vi = V2- Thus 
e^i = and so r'l — r2, and so (''ijvj) — (^2 '^2)' contrary to our assumption of distinctness. 
Similarly C3 ^ 1 and C2 7^ C3. 

Now 

5(^) := (C3 - l)f2{z) - (C2 - l)Mz) 

is a quadratic with as a root. Setting its coefficients equal to gives 3 equations: 

= C2 (ri vi - r2 V2) + C3 {rs V3-riVi) + C2 C3 ( r2 1;2 - V3) 
= C2 {£1 (ri - r2) + fci (t;i - t;2)) + C3 (^i(r3 - n) + ki{v3 - vi)) 

+ C2 C3 (f-i (r2 - rg) + fci (W2 - V3)) 

= C2 (£2 (ri - r2) + A;2 (t;i - V2)) + C3 {I2 {r3 - ri) + fc2 (ws - wi) ) 

+ C2 C3(£2 (r-2 - rs) + fc2 {V2 - V3) ) 

When combined with our knowledge that C2, C3 are not 0, 1, or equal, and {k\,k2) not a multiple of 
(£1,^2), this implies that the pairs {fm,Vm) are not distinct. 
Now suppose that f\ =0, v\ ^0, and set 

f2{z) := C2-fr(r2, z)L{v2, z) - L{vi,z) 
h{z) := C3K{r3, z)L{v3, z) - L{vi,z). 

We have f2{0) = fsiO) = 0, and in particular 

g{z) := 03/2(2) - 02/3(2) 
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is a quadratic with as a root. Setting the coefficients of g{z) equal to yields equations which, as 
before, with our assumptions about C2, C3, fci, fc2, ^i, ^2, imply that the three pairs {fm,Vm) are not 
distinct. The case fi = ui = is handled similarly. The case fi = 1)2 = is eliminated for distinct 
i,j by the disjointness of Si and Sj, and for i — j hy the distinctness assumption on the three pairs. 

Thus there are not such {fm,Vm) (1 < < 3), whether none of these six variables are 0, one of 
them is 0, or two of them are 0. 

Proof of (iv). Consider mi,ni G M' and Si,ti e S" with 

(mi + ysi) + (ni + yti) = ■■■ = {nigh+i + ysgf+i) + [ugf+i + ytgf+i) (mod xy). (6) 

We need to show that rrii — rrij, Si — Sj, rii — rij, and ti = tj, for some distinct Reducing Eq. © 
modulo y, we see that mi + rii = 1112 + 712 = • • • = + "g/+i (mod y). Since ||Af*||oo < /, we 

can reorder the mi,ni, Si,ti so that mi = m2 = • • • = mg+i and ni = 712 = • • • = 7!g+i. Reducing 
Eq. ^ modulo x we arrive at 

ysi + yti = ys2 + yt2 = ■ ■ ■ = ysg+i + ytg+i (mod x) 
whence, since gcd(x,?/) = 1, 

si + ii = S2 + ^2 = • • • = Sg+i + ig+1 (mod x). 
The Si mod x and ti mod x are from 5*, and || 5**1100 < 5, so that for some distinct i, j, Si — Sj and 

ti — tj • 

Proof of (v). Let M C Z.y have cardinality C(/, y) and ||M*||oo < /• Set M' = {m e [y] : m mod y e 
M}. Let S' C [0,r) have cardinality i?(5, r) and ||(S")*||oo < 9- Set (with a; > 2r) S" := {s mod x: s e 
S'} C Za;. By the construction in part (iv) of this theorem M + yS C Z^y has 

||(M + 2/5)*||oo <5/- 

Since M'+yS' C [y + yr] amlM'+yS' = M+yS (mod xy), ifxy > 2{y+yr) then |l(M'+7;5')*|loo = 

\m+ysn^<gf. 

We can shift M modulo y without affecting \M\ or ||il/*||oo. Since there clearly must be two 
consecutive elements of AI with difference at least \y/C{f,y)\, we may assume that M' C [y — 
\y/C{f,y)]+l].ThviS, 

M' + yS' C [y - \ylC{f, y)\+l + y{r ~ 1)] = [yr + l- \y/C{f, y)]] 

and 

\M' + yS'\ = \M\\S'\=C{f,y)R{g,r). 
This proves part (v). 

The reader might feel that the part of the argument concerning the largest gap in M is more 
trouble than it is worth. We include this for two reasons. First, Erdos ^3 Problem C9] offered 
$500 for an answer to the question, "Is i?(2, n) = ^/n + (1)?" This question would be answered in 
the negative if one could show, for example, that Bose(p, 0, 1) contains a gap that is not O (p), as 
seems likely from the experiments of Zhang [201 and Lindstrom ^31 ■ Second, there is some literature 
(e.g., [7] and J7|) concerning the possible size of the largest gap in a maximal Sidon set contained 
in {1, ... ,n}. In short, we include this argument because there is some reason to believe that this 
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9 


X 


R(g, x) 


Witness 


2 


7 


4 


{1,2,5,7} 


3 


5 


4 


{1,2,3,5} 


4 


31 


12 


{1, 2, 4, 10, 11, 12, 14, 19, 25, 26, 30, 31} 


5 


9 


7 


{1,2,3,4,5,7,9} 


6 


20 


12 


{1, 2, 3, 4, 5, 6, 9, 10, 13, 15, 19, 20} 


7 


15 


11 


{1,2,3,7,8,9, 10,11,12,13,15} 


8 


30 


17 


{1, 2, 5, 7, 8, 9, 11, 12, 13, 14, 16, 18, 26, 27, 28, 29, 30} 


9 


24 


16 


{1, 2, 3, 4, 5, 6, 7, 8, 9, 13, 14, 15, 17, 22, 23, 24} 


10 


33 


20 


{1, 2, 4, 5, 6, 7, 8, 9, 10, 11, 13, 15, 20, 21, 22, 23, 30, 31, 32, 33} 


11 


25 


18 


{1, 2, 3, 4, 5, 11, 12, 13, 14, 15, 16, 17, 18, 19, 20, 21, 23, 25} 



^8/7 1.069 
yi6/15 Si 1.033 
y 36/31 Si 1.078 
yigyiS Si 1.043 
^6/5 Si 1.095 

y 121/105 1.073 
28 9/240 1.097 
y 32/27 1.089 
y 40/33 1.101 

y 324/275 Si 1.085 



Table 4: Important values of R{g, x) and witnesses 



is a significant source of the error term in at least one case, and because there is some reason to 
believe that improvement is possible. 

Proof of (vi). The set 



5':= 



0, 



^1 
3J 



0, 



5,5 



has cardinality 5 + 2 [5 /3J 

ll5*l|oo=5 + 2 



5 


+ 


-3- 





[.g/6j, is contained in [0,3(/ — [5/3J], and has 

eJ 

We remark that this family of examples was motivated by the finite sequence 

^= (l,0,i, 1,0, 1,1,1), 

which has the property that its autocorrelations 

5*5= (1,0,1,2,1,3,3,3,3,3,3,2,3,2,1) 

are small relative to the sum of its entries. In other words, the ratio of the ^°°-norm of 5 * 5 to 
the .^^-norm of S itself is small. If we could find a finite sequence of rational numbers for which 
the corresponding ratio were smaller, it could possibly be converted into a family of examples that 
would improve the lower bound for p{2g) in Theorem^ for large g. 



3.3 Theorem IHl and Theorem HI 

Our plan is to employ the inequality of Theorem [^Jv) when y is large, / = 2, and x ~ ^g. In other 
words, we need nontrivial lower bounds for C(2,y) for y —^ 00 and for R{g,x) for values of x that 
are not much larger than g. The first need is filled by Theorem [5fi) , (ii) or (iii), while the second 
need is filled by Theorem 12 vi). 

For any positive integers x and m < \J n/x, the monotonicity of R in the second variable gives 
R{2g, n) > R{2g, x{m'^ — l)) > R{g, x)C{2, m? — 1) by Theorem|2Iv) . If we choose m to be the largest 
prime not exceeding \pnjx (so that m > \pnfx by the Prime Number Theorem), then Theorem|2Jii) 
gives R{2g, n) > R{g, x) ■ m > R{g, x)y^n/x for any fixed positive integer (7, and hence 

,(2,) . liniinf > hminf ^(^''^^ = 

n^oc ^/gE n^oo ,/gx 
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The problem now is to choose x so as to make R{g, x) / ^Jgx as large as we can manage for each g. 
For g = 2, 3, . . . , 11, we use TableElto choose a: = 7, 5, 31, 9, 20, 15, 30, 24, 33, and 25, respectively 
(see Table01for witnesses to the values claimed for R{g,x)). This yields Theorem|2| 

We note that Habsieger & Plague have proven that R{2,x)/^/2x is actually maximized at 
X = 7. For g > 2, we have chosen x based solely on the computations reported in Table El For 
general g, it appears that R{g, x)/y/gx is actually maximized at a fairly small value of x, suggesting 
that this construction suffers from "edge effects" and is not best possible. 

The first assertion of Theorem 0] is the immediate consequence of the obvious R{2g + l,n) > 
R{g, n). To prove the lower bound on <T{2g), we set x = 3g— [g/3\ + 1 and appeal to Theorem 12 vi). 

We remark that the above proof gives the more refined result 

11 ; / „/ 1 /n\("-i)/2 

R{2g,n)> /^/- ^/ -1 / 



as — and g both go to infinity, where a < 1 is any number such that for sufficiently large y, there is 
always a prime between y — y°' and y. For instance, we can take a = 0.525 by [T]. This clarification 
implies the final assertion of the theorem for even g, and the obvious inequality R(2g + l,n) > 
R{2g, n) implies the final assertion for odd g as well. 

4 Significant Open Problems 

It seems highly likely that 
hm 

is well-defined for each g, but this is known only for g = 2 and 5 = 3. It also seems likely that 

hm = 1. 

n^oo R[2g + 1, n) 

The evidence so far is consistent with the conjecture limg^oo ""(ff) — V2- 

One truly outstanding problem is to construct sets S C Z with 115*1100 = 4 that are not the 
union of two Sidon sets. In fact, all known constructions of sets with || 5*1100 < g are not native, 
but are built up by combining Sidon sets. It seems doubtful that this type of construction can be 
asymptotically densest possible. The asymptotic growth of i?(4, n), or even of C(4, n), is a major 
target. 

As a computational observation, the set S — q) U -B^i U -B(i,2), where 

B{k,M) - {«' e - 1] : 0"' - k2e^ - kid e ¥,} 
and 9 generates the multiplicative group of ¥g3 , has the property that 

5 * 5 * Sik) = I {(si, S2, S3) ■■s,eS,J2 -^^ = ^} I < 81, 

even when the sums are considered modulo q'^ — 1. As such, it seems likely that the generalizations 
of Bose's and Singer's constructions given in this paper generalize further to give sets whose /i-fold 
sums repeat a bounded number of times. Proving this, however, will require a more efficient handling 
of systems of equations than is presented in the current paper. 

We direct our readers to the survey and annotated bibliography |15j for the current status of 
these and other open problems related to Sidon sets. 
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